Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: 6evayoGYC0NrQz8q9aC3sPgm/s7enKa1OQAHM+PTFk0=
Subject key identifier: 5D:56:06:1E:10:AF:A3:28:9D:6A:09:81:AD:D2:76:07:79:DA:1B:AA
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 01967230164C6421CB8D8BACD93283ACE02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0972
Signing time: Sat 26 Apr 2025 13:01:16 +0000
Manifest this update: Sat 26 Apr 2025 13:01:16 +0000
Manifest next update: Sun 27 Apr 2025 13:01:16 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: cOYY8FXG6DcQcJIGGrm2/RqEaXRIBVX6sSDgpFmKLu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:30:16:4c:64:21:cb:8d:8b:ac:d9:32:83:ac:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Apr 26 13:01:16 2025 GMT
Not After : Apr 27 13:01:16 2025 GMT
Subject: CN=5d56061e10afa3289d6a0981add2760779da1baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:b6:04:d6:a4:e7:55:73:75:26:78:66:62:
c8:5e:6e:e8:86:a9:96:2e:fd:13:60:52:a8:c6:2c:
14:65:e5:fc:2e:0b:c3:77:64:6c:6e:41:f8:89:9b:
db:5e:bb:13:83:3b:c3:c2:1e:7f:47:3e:af:5f:3b:
57:fa:83:a9:00:d1:c5:42:f9:27:37:c2:d4:f9:cd:
3c:dd:93:c5:18:5e:ba:34:31:d8:86:20:e1:73:79:
f6:57:75:36:c6:6d:e9:e2:e6:f4:2b:51:27:49:35:
73:97:4f:a6:7c:9d:e0:2b:02:39:26:67:23:2d:be:
2e:3b:b2:60:43:7e:c8:4a:19:77:04:1f:e6:7c:13:
7d:97:85:e9:e1:2c:69:e2:ef:fc:e4:6e:c3:6a:c8:
e7:c4:00:a7:c7:36:7a:81:18:84:7b:4e:4b:89:41:
57:cd:de:2d:ca:ba:18:fc:4f:7d:a1:ca:2b:84:8b:
1c:88:89:f0:5e:9c:de:56:af:ff:8a:13:fe:bb:89:
d4:c7:e6:3b:60:c6:68:67:70:e3:75:62:15:3a:17:
85:d7:ae:ae:1d:d6:2d:a0:7b:c9:d1:d9:d8:0e:07:
c4:aa:f0:dc:b9:dc:59:b1:32:a7:b5:62:99:55:59:
c6:89:4f:cd:37:0f:0d:ae:d4:0b:8e:c0:45:58:b0:
a2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:56:06:1E:10:AF:A3:28:9D:6A:09:81:AD:D2:76:07:79:DA:1B:AA
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3a:50:fc:93:2b:fa:d8:75:d4:12:fd:4a:21:8a:0f:31:16:
f5:18:7d:4a:46:f0:3b:c4:ee:8c:99:3f:1d:c1:50:63:c5:48:
ce:69:92:36:00:c1:b3:44:96:d8:cc:49:17:98:3f:27:e4:02:
d0:8c:eb:5d:af:d6:03:1c:26:7b:61:39:14:da:d0:ed:5a:f3:
ed:da:99:9c:d5:a5:29:90:53:a4:72:3d:c3:6c:f2:15:59:6d:
9c:82:75:cf:53:09:64:6a:df:42:22:5c:f6:ba:70:2c:07:3c:
95:78:3e:18:b2:57:91:25:c4:eb:c4:c9:43:c8:9a:2a:f2:7c:
72:65:c3:59:03:55:ea:6d:02:fb:35:05:86:0c:af:64:81:9c:
8f:cb:47:a1:e6:17:40:41:a6:25:56:b7:9c:f7:8d:6a:94:73:
4d:c0:35:39:09:db:31:b4:b9:ae:62:c0:3b:3b:f7:66:77:df:
b0:88:e8:c9:34:0e:6a:2e:bf:f2:52:a2:cc:a6:0f:03:2f:6e:
39:1c:e2:a9:0e:54:6e:5c:1a:a5:03:1a:2c:92:58:da:27:46:
8a:97:0d:6f:35:84:27:2b:80:5b:8c:34:67:e4:19:23:45:1a:
79:60:a5:6d:b3:74:3f:c8:8b:4f:61:7b:11:46:ea:7c:5b:57:
c4:f8:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:47 2025 by rpki-client